Identity attack surface pricing that grows with you, not with your sprawl.

By plan and identity band. Your band is set by the unique identities you own and govern, counted once across every connected cloud. Essentials starts at $9,000 a year and Professional at $15,000 a year for up to 2,500 identities; at 10,000 identities they are $24,000 and $38,000 a year. Every plan includes one environment; each additional tenant or cloud organization is $4,000 a year on Essentials and Professional. Nothing is charged per subscription, per resource or per finding, and there is no automatic overage.

No. Price depends only on identity count, and an identity that appears in more than one cloud counts once. Every plan includes one Entra tenant, and one AWS organization and one GCP organization as those connectors are released. Plans are Azure and Entra ID today; we sell AWS and GCP coverage only once it ships.

Discovery keeps running and no finding is hidden. Your admin sees the count and the rule used, and you get 60 days or until renewal, whichever is later. Any band change is agreed with you; we never charge automatically.

Read-only access only: admin consent to five read-only Microsoft Graph permissions for the AuditGraph collector, and the Azure Reader role (Log Analytics Reader is optional) at the tenant root management group or at the scopes you choose. You can review and remove both in your own portal. No agent and no write permission, on any plan. AuditGraph never changes your tenant on its own: your team applies every fix with the steps and scripts AuditGraph provides, and on Professional and Enterprise each fix can be tracked as a Jira, ServiceNow or Azure DevOps ticket that AuditGraph verifies on the next scan.

Evaluations open soon. Each one will be free for 14 days, with no credit card. It is read-only: you get the full identity graph, findings, attack paths and evidence for one Entra tenant, but workflow changes such as triage, risk acceptance and access reviews are not available. It includes 5 seats, the first scan and up to 3 rescans a day; there are no scheduled scans. Users sign in with their Microsoft work account; connecting your own identity provider for single sign-on needs a paid plan. Every customer will start here, and from day 10 the app shows an evaluation summary of what was found and what your team fixed.

From inside the app. Every customer starts on the free evaluation; when you are ready, an Admin opens Plan & usage and chooses Upgrade on Essentials or Professional. The price is the annual list price of your own identity band, shown there from your real identity count. We send an order form and invoice you annually; no card is needed and nothing is charged automatically. For Enterprise, or more than 50,000 identities, contact sales.

Unless you upgrade, the connection is closed and your data stays read-only for 7 days, with a notice when the evaluation ends and another the day before deletion. Then it is deleted automatically. To keep it, upgrade to a plan from inside the app before then. After the first scan, Plan & usage shows the identity band you would land in and its annual list price on each plan.

Ask us. Only AuditGraph staff can extend an evaluation, so if you need more time to finish your review, email auditgraph_sales@nexgenixlabs.com before the 14 days are up and we will look at it with you. There is no extension option to buy or switch on in the app.

Not yet. Today we contract directly. An Azure Marketplace private offer is planned once the purchase route and MACC eligibility are confirmed; ask us if it matters for your procurement.

Renewal increases are capped at 5% a year, excluding band changes you agree to. If your identity count falls, you move down a band at renewal.

No. Plans are annual and invoiced upfront, with an order form; there is no card payment. Multi-year terms are discounted: 8% off for 2 years and 15% off for 3 years, invoiced annually.

Yes. Nonprofit and education organizations get 20% off list price.